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Assistant Commissioner for Patents 
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Sir: 



Enclosed for filing is the utility patent application of Daniel I. FLITCROFT and Graham 
O'DONNELL for DELIVERY OF A SECURE MEANS OF GENERATING PERSON-TO- 
PERSON. PERSON-TO-BUSINESS AND BUSINESS-TO-BUSINESS FINANCIAL 
TRANSACTIONS . 

Also enclosed are: 

[X| 3 sheet(s) of [ ] formal [X] informal drawing(s); 

[ ] a claim for foreign priority under 35 U.S.C. §§ 119 and/or 365 is [ ] hereby made to , 
filed in _ on __; 
[ ] in the declaration; 

[ ] a certified copy of the priority document; 

[ ] a General Authorization for Petitions for Extensions of Time and Payment of Fees; 

* [ ] statements) claiming small entity status; 

[ ] an Assignment document; 

[ ] an Information Disclosure Statement; and 

[ ] Other: 

PQ An [ ] executed [X ] unexecuted declaration of the inventor(s) 
[X ] also is enclosed [ ] will follow. 

[ ] Please amend the specification by inserting before the first line the sentence —This 

application claims priority under 35 U.S.C. §§119 and/or 365 to _ filed in _ on the 
entire content of which is hereby incorporated by reference. - 
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[X| The filing fee has been calculated as follows [X] and in accordance with the enclosed 
preliminary amendment: 
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Basic Application Fee 



Total Claims 



Independent 
Claims 



MINUS 3 = 



x $18.00 
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Person-to-Person, Person-to-Business, 
Business-to-Person, and Business-to-Business 
Financial Transaction System 

This application claims the benefit of U.S. Provisional Application 
No, 60/129,033 filed on April 13, 1999, herein incorporated by reference. 

BACKGROUND OF THE INVENTION 

1) Field of the Invention 

The present invention relates to financial data processing and business 
practices regarding funds transfer. More specifically, the present invention 
provides a personal payment number (PPN) wherein an individual or business can 
receive payments from other individuals or businesses without revealing 
confidential account information or establishing themselves as a credit/debit card 
accepting merchant. 

2) Brief Description of Related Art 

With the increasing globalization of commerce the need for safe and secure 
ways to make payments between individuals, businesses and merchants now extends 
to systems that provide global coverage and include currency exchange systems. In 
addition there is a need for these systems to be secure and also to be trusted by all 
parties. 

Existing systems such as systems based on bank checks or bank transfers 
involve either the payer or the payee revealing details about their bank account to at 
least the other party. For instance, the recipient of a check sees the payer's bank 
account and routing information on the check, and with a bank transfer the 
recipient/payee must provide their account information to the sender/payer. In a 
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global situation where the two parties may have never have met, sharing of such 
information may be sufficient cause for concern to deter one or other party from 
proceeding. Also, different checking and bank transfer systems can reduce the 
effectiveness of the financial transaction. 
5 The global credit/debit card system provides an ideal mechanism for 

receiving payment but under normal circumstances requires the recipient to be a 
credit card accepting merchant. Being a credit card accepting merchant may not be 
cost-effective for some people or businesses wanting receiving payments. Also 
smaller merchants without a good trading history may have difficulty in being 

10 accepted by credit card acquiring banks as credit card accepting merchants.. 

The ability to receive funds using a simple, rapid and secure system without 
the need to be a formal credit card accepting merchant will be of benefit to a wide 
range of users. For example the rise of online auction services (such as those 
developed by eBay and Amazon) means that many individuals may occasionally 

15 require a means of receiving funds remotely, such as over the Internet. Also, the 
widespread "shareware" software distribution system provides a mechanism for 
software written by individuals to be distributed on a global basis. Shareware 
authors are generally individuals that do not have the organizational support to 
handle global payments. Therefore a system that can provide a global payment 

20 solution with no administrative overheads with automatic currency conversion 
would be very attractive to these as well as many other users. 

In the growing global electronic commerce environment many individuals 
and companies may offer their service remotely over the Internet or other public, 
semipublic or closed network. Such services (programming, translation, writing, 

25 clerical, accounting, web-page design, etc) will typically be provided remotely and 
not require any direct physical interaction between the provider of the service and 
the service user. The two parties to such an arrangement may never have met raising 
the issue of mutual trust. In addition they may be in different countries and this 
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produces problems for currency exchange or incompatibility of bank transfer 
systems as well legal challenges if a non-payment dispute arises. Again a simple, 
rapid global payment solution would be of benefit. 

The need and value of such a service is indicated by the number of systems 
5 that have already been proposed to address this issue. Examples of systems 
operating within this area include: 

Billpoint This service acts as an intermediary between payers and payees, 

requiring both to sign up to the system. It is operated as proprietary 
system and is designed for application in the on-line auction house 
10 arena. 

PayPal This system is another intermediary closed system where the payer 

registers with PayPal and provides credit card or bank account 
details. When the payer wants to make a payment he transfers money 
to PayPal and an email is sent to the email address of the recipient 
15 with message that someone has sent you money. The recipient must 

then register to receive the funds by account transfer or refunded onto 
a conventional credit card number. 

Payme This system sends email bill to users through the Payme site (payee 

registers with "Payme"), email goes out with a request for payment. 
20 The payer pays Payme who transfers the funds to payee. 

eMoneyMail In this system the payee goes the eMoney website and pays with 
credit/debit/account transfer and gives the email address of the 
recipient. The recipient receives an email with a link back to the 
eMoney site where they can receive the funds by transfer to a 
25 checking account or credit card. 

Wire-transfer The provider offers a range of services offer account to account wire 
transfer such as Western Union and Swift. 
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Checkfree This system is an example of a bill paying system which requires 
both parties to be registered with the system. 
In many of the above systems the recipient must give either a credit/debit 
card number or bank account number to a third party (payer or other intermediary). 
5 In the case of using a credit/debit card, the payment is made by initiating a "refund" 
transaction even though there was no matching initial payment since the payment 
was made another party. There are two key problems with using this refund 
mechanism: 

(1) Within the current card systems (such as Visa, Mastercard and 

10 Europay) there is the problem of reverse interchange. This is the process whereby a 
refund leads to the customer's bank (i.e., the bank who issued the credit card that is 
being refunded) paying back to the merchant acquiring bank (i.e., the bank that 
received the refund request from a credit card merchant) the interchange fee 
(effectively a commission) that would have been kept by the customers bank on the 

15 original payment. Since no original payment has been made in the scenario where 
someone is receiving money from a third party, the customer's bank (i.e., the bank 
who issued the credit card that is being refunded) is effectively being charged for the 
transaction at a cost of approximately 1.5% of its value depending on the prevailing 
interchange rates for the specific credit card. Under the current credit card systems, 

20 trying to change the rules for refunds to address this issue will lead to the converse 
problems in true refunds. 

(2) In order to receive funds a user must reveal his or her actual credit 
card number. These details have the potential to be misused creating worry, 
inconvenience and potentially financial cost for the recipient. In the case of Internet 

25 payment systems, this information is then potentially stored on a server connected to 
the Internet. As recent fraud scares have indicated, storage of personal details in 
computer databases linked to the Internet represents possibly the most vulnerable 
security weakness with Internet based credit card transactions. 
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In addition, with several of above the above Internet payment services, the 
recipient receives an email notifying them that someone wishes to pay funds to 
them. The recipient then follows a link in the email to a site where he/she must 
enter their credit or bank account details to receive the funds. Clearly a fraudulent 
5 message offering a prize, a non-existent payment, etc., could easily lead to innocent 
victims giving over their credit card details which could then be misused by the 
perpetrator of the fraud. 

SUMMARY OF THE INVENTION 

These and other problems are solved by the present invention which 
10 represents a new form of credit/debit card with an associated account number that 
is limited so as to prevent it being used for any purchases - but instead is expressly 
designed for the purpose of receiving funds. In other words, the present invention 
involves a personal payment number (PPN) format including routing information 
(e.g., a BIN) to direct financial transaction information to a particular institution 
15 among a plurality of institutions on a computer network, and a unique 

identification of a user associated with the particular institution. The PPN format 
can also include an identifier identifying the personal payment number as an 
account to which funds can be transferred but from which funds cannot be 
transferred. The PPN format can follow a standard credit/debit card format, or 
20 can be unique among but follow standard credit/debit card formats or be distinct 
from standard credit/debit card formats. The PPN can alternatively follow a 
standard credit/debit card number format and omit any identifier, but the routing 
information be for an institution that is restricted to transactions where funds are 
received. 

25 This personal payment number (PPN) can therefore be revealed without 

any concern for fraudulent misuse since it can only be used to receive funds and 
therefore is of no benefit to any other party. Any misuse would only benefit the 
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registered cardholder. In effect it represents an inverse debit/credit card, allowing 
payment directly into an account rather than from an account. 

To incorporate this invention with an existing credit or debit card account, 
a payment account number could be linked to an existing credit/debit card account 
5 so users would have a combined account with two numbers: one for making 
payments (the actual credit/debit card number) and one for receiving payments 
(the PPN or personal payment number). 

The payment number could be printed on the back of an existing 
credit/debit card allowing for use in face to face transactions or for easy access if 
10 used over the phone or Internet. The number could also be stored within a 
software package (such as virtual card software) for easy use on the Internet. 

Since a PPN can not be used (or misused) for making purchases it can be 
freely disseminated in a way similar to the way to a public encryption key is freely 
disseminated to allow payments to be made by anyone who needs to pay a certain 
15 person. Examples include shareware authors who could include their PPN in their 
software registration documentation. In on-line auction situations, sellers could 
email their PPN to the purchaser to allow them to complete the purchase at a 
payment service of their choice. 

Of particular interest is the fact that a PPN could be used in place of a 
20 credit card number in the existing commercial systems named above (e.g. , 

Billpoint, PayPal, Payme, and eMoneyMail) where the recipient receives funds by 
a refund onto a conventional credit card without the concerns of revealing a credit 
card number to a third party and its subsequent storage on an Internet accessible 
server. 

25 The PPN, if it has the numerical format and verification codes (such as the 

checksum and cvv2) of a normal credit card, it can be processed by normal credit 
card terminals/software. To avoid any possible confusion with existing credit 
cards, an alternative would be to use a different number of digits or other 
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differentiator. This would prevent the possibility of anyone trying to use a PPN 
for making a payment rather than receiving a payment since merchants and others 
would recognize that the PPN did not represent a valid credit card format. A 
possible disadvantage of specific PPN number format is that potentially less of the 
existing credit card infrastructure could be used leading to increased up-front 
investment costs for implementation of the system. 

BRIEF DESCRIPTION OF THE DRAWINGS 

These and other advantages, features and aspects of the present invention 
shall now be described by way of exemplary embodiments to which the present 
invention is not limited with reference to a accompanying drawing figures in 
which: 

Fig. 1 shows an exemplary system for implementing the present invention; 

Fig. 2 shows an exemplary personal payment number format implementing 
the present invention; 

Fig. 3 shows, in high-level form, the operation of the central processing 
station shown in Fig. 1; 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

In this specification the terms "credit card" and "credit/debit card" refers 
to credit cards (MasterCard®, Visa®, Diners Club®, etc.), charge cards (e.g., 
American Express®, some department store cards), debit cards such as usable at 
ATMs and many other locations or that are associated with a particular account, 
and hybrids thereof (e.g., extended payment American Express®, bank debit cards 
with the Visa® logo, etc.). 

Various aspects of the invention may be embodied in a general purpose 
digital computer that is running a program or program segments originating from 
a computer readable or usable medium, such medium including but not limited to 
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magnetic storage media (e.g., ROMs, floppy disks, hard disks, etc.), optically 
readable media (e.g., CD-ROMs, DVDs, etc.) and carrier waves (e.g., 
transmissions over the Internet). A functional program, code and code segments, 
used to implement the present invention can be derived by a skilled computer 
5 programmer from the description of the invention contained herein. 

Exemplary System Implementation 

Fig. 1 shows an exemplary overview of a system for implementing the 
limited-use credit card system of the present invention. Further details of similar 
systems can be found in co-pending U.S. Application Nos. 09/235,836 filed on 

10 January 22, 1999 and 09/506,830 filed on February 18, 2000, herein incorporated 
by reference. The system 100 comprises a central processing station 102, which, 
accordingly to exemplary embodiments, may be operated by the credit card 
provider. Generally, this central processing station 102 receives and processes 
remotely generated credit card transactions. The credit card transactions can 

15 originate from a merchant in a conventional manner, e.g. , by swiping a credit card 
through a card swipe unit 106. Alternatively, the credit card transaction requests 
can originate from any remote electronic device 104 (e.g., a personal computer). 
These remote devices 104 can interface with the central processing station 102 
through any type of network, including any type of public or propriety networks, 

20 or some combination thereof. For instance, a personal computer 104 can 

interface with the central processing station 102 via the Internet 112. Actually, 
there may be one or more merchant computer devices (not shown) which receive 
credit card transactions from the remote electronic device 104, and then forward 
these requests to the central processing station 102. The central processing station 

25 102 does not have to be in one geographic location. Instead, it can be embodied 
as a credit card transaction network which routes transaction information to 
specific card issuing institutions by, e.g., a bank identification number (BIN). 
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Here it should be noted that a single bank can have several BINs, each of which 
would be considered an institution of purposes of this disclosure. The central 
processing station 102 can also interface with other types of remote devices, such 
as a wireless device 140 (e.g., cellular telephone), via radiocommunication using 
5 transmitting/receiving antenna 138. 

The central processing station 102 itself may include a central processing 
unit 120, which interfaces with the remote units via network I/O unit 118. The 
central processing unit 120 has access to a database of credit card numbers 124, a 
subset 126 of which are designated as being available for use as personal payment 
10 numbers. 

Also, the central processing unit 120 has access to a central database 122, 
referred to as a "links" database. This database is a general purpose database 
which stores information regarding customers' accounts, such as information 
regarding various links between each customer's PPN and his or her regular credit 

15 card account or other type of account using, for instance, some type of linked-list 
mechanism. Databases 122 and 124 are shown separately only to illustrate the 
type of information which may be maintained by the central processing station 
102; the information in these databases can be commingled in a common database 
in a manner well understood by those having skill in the data processing arts. For 

20 instance, each PPN can be stored with a field which identifies a regular account to 
which it is linked, and various conditions regarding its use. It should be noted 
that no discernable relationship should exist between the PPN and the regular 
credit card number. Also, the different databases can be addressed using different 
BIN numbers or different number formats or other identifiers in the PPN number. 

25 The central processing unit 120 can internally perform the approval and 

denial of transaction requests. For the PPN, if the transaction does not involve 
transferring funds into the PPN account, the transaction would be denied. For 
credit transactions, the approval or denial by making reference to credit history 
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information and other information in the conventional manner. Alternatively, this 
function can be delegated to a separate clearance processing facility (not shown). 

Finally, the central processing station includes the capability of 
transmitting the PPN to customers. In a first embodiment, a local card dispenser 
5 128 can be employed to generate a plurality of PPN cards 132 and/or credit cards 
134 additionally bearing a PPN for delivery to a customer. In another 
embodiment, the PPN can be printed on a form 136 by printer 130, which is then 
delivered to the customer via the mail. The PPN can be included in the initial 
letter distributing an associated credit card, or in a monthly or other periodic 

10 account statement sent to the customer. In yet another embodiment, the PPN can 
be electronically downloaded to a user's personal computer 104, where they are 
stored in local memory 142 of the personal computer 104 for subsequent use. In 
this case, the PPN can be encrypted, but concern over release of the PPN is much 
less than for regular credit card numbers. Instead of the personal computer 104, 

15 the numbers can be downloaded to a user's smart card though an appropriate 

interface. In a still further embodiment, the PPN can be downloaded to a radio 
unit 140 (such as a portable telephone) via wireless communication. In another 
embodiment, an ATM 108 can be used to dispense the PPN cards 110. Those 
skilled in the art will readily appreciate that other means for conveying the PPN 

20 numbers/cards can be employed. These embodiments are, of course, usable 
together. 

The logic used to perform the PPN transactions preferably comprises a 
microprocessor which implements a stored program within the central processing 
unit 120. Any general or special purpose computer will suffice. In alternative 
25 embodiments, the logic used to perform the PPN transactions may comprise 

discrete logic components, or some combination of discrete logic components and 
computer-implemented control. 
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Personal Payment Number Format 

Within the VISA and Mastercard systems, for instance, the first 6 digits of a 
credit card number represent a code (Bank Identification number or BIN) to identify 
both the issuing institution and are also used to define the associated charges 
5 (interchange fees) that are automatically made for each transaction. Other credit 
card systems use a similar procedure and card number format. A card issuing bank 
will typically have several BIN's, one for each different card products that attract 
different interchange rates. By allocating PPN's within a BIN that is used 
exclusively for PPN's, no payments can be made in that BIN. Therefore the 
10 interchange fees can be adjusted to make them appropriate for this sort of payment 
(ideally attracting zero or negative interchange). 

This is in contrast refunding a conventional card account number leads to 
inverse interchange being charged to the card holder's bank as discussed above. In 
this situation, the card holder's bank is effectively subsidizing whichever 
15 merchant/acquirer handles the refund and has no effective means of control over this 
transaction and the associated costs. Although these distinctions make little 
difference to the holder of a PPN, they are of great relevance to the banks since they 
have a direct impact on the income from their credit card portfolio. 

Thus, a personal payment number format includes routing information 
20 (e.g. , BIN) 201 to direct financial transaction information to a particular 

institution among a plurality of institutions using a computer network, such as 
shown in the exemplary embodiment of Fig. 2, The PPN format also includes 
unique identification 202 of a user associated with the particular institution. The 
personal payment number identifies an account into which funds can be transferred 
25 but from which funds cannot be transferred. 

This identification of the account as being a payment only account can take 
on several forms. For instance, the personal payment number format can include 
an identifier 203 identifying the personal payment number as an account into 
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which funds can be transferred but not from which funds can be received. The 
position of this identifier 203 within the PPN format could be arbitrary or selected 
according to factors outside the scope of this invention. Alternatively, the 
identifier 203 can be omitted and the routing information 201 (e.g., BIN) can 
5 identify an address associated with accounts limited to receiving funds and not 
capable of transferring out funds. 

The format of a PPN should ideally be of a format that is compatible with the 
existing credit/debit card numbering format which is usually 16 digits with a current 
maximum of 19 digits for the account number field within the industry standard 
10 transaction messaging protocols. The PPN should also have a valid checksum to 

ensure that it is transmitted without problems through existing networks which may 
include checksum validation. An expiry date should be provided and additional 
verification codes such as the cw2 code if required to ensure compliance with 
existing networks. 

15 A PPN specific coding format could be used to prevent confusion with 

existing credit cards but this would reduce the compatibility with the existing credit 
card systems requiring additional investment to implement the system. A 
compromise would be for the PPN to deviate from an existing format sufficiently to 
allow easy recognition that it is not a normal credit card number while still allowing 

20 transmission in the data fields of the transaction messaging systems that would 

normally hold the credit card number, for example for VISA cards 17 or 18 digits 
could be used to differentiate from the existing 16 digit credit card format, such as 
shown in Fig. 2. 

In other words, the personal payment number can be formatted in 
25 accordance with standard credit/debit card formats. It can also be formatted to be 
distinct from standard credit/debit card formats, which might require some 
adjustment to the conventional credit transaction processing system. 
Alternatively, the personal payment number can be formatted to be unique among 
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standard credit/debit card formats but remain within the acceptable standards for 
processing within the conventional credit transaction processing system. For 
instance, it can have an extra number which is acceptable to the credit transaction 
system, but not currently used by card issuing institutions. Also, the personal 
5 payment number format can include a verification code such as a checksum 
number and a cvv2. 

The PPN Uses and Processes 

A PPN can be used in a variety of ways. After a transaction is begun by 
accessing a web site or the like a PPN account holder can transmit the number (even 

10 by insecure means such as email) along with an electronic invoice requesting 
payment for goods/services provided. A PPN can also be included in the 
documentation or program code of a shareware or "try before you buy" software 
package. In this was the payee does not have to make any active step to receive 
funds, the person registering/purchasing the software simply uses the PPN to make 

15 the payment at an appropriate registration site. A PPN could also be displayed 
within a webpage. 

In many current systems such as Billpoint the recipient receives an 
automated email from the payment system website when a payment is made. It is 
only when the recipient registers with the payment company that credit card or 

20 account details are given. Under these circumstances it possible that the email could 
be intercepted and someone other than intended recipient collects the funds. With a 
PPN payment, the payer can optionally verify the name linked to the PPN at a time 
of making a payment (Step 303) thus ensuring that the correct person is being 
credited. Alternatively banks could provide an authorized directory to allow payers 

25 to obtain a person's PPN, a form of PPN escrow. 
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Implementation Components 

Implementation of the PPN solution includes a system and process 
comprising the following exemplary components: 
User Request Handling Process, 
5 PPN Allocation System, 

PPN/Primary Account Database Storage, 
Secure PPN Database Query Interface, 

PPN Distribution, User Storage and Access Device(s) and Systems, 
PPN Transaction Initiation Device(s) and Systems, 
10 PPN Transaction Routing Network, 

PPN Processing System, and 
Customer Service System. 
These components are taken in turn for more detailed descriptions. 



User Request Handling Process (Step 301) 

15 Users can request a PPN from their bank or a bank can automatically allocate 

and distribute a PPN to all its account holders. During this process the bank logs 
details such as the account name, the PPN and the associated account in which funds 
are to be lodged. The options for the receiving account include a credit card 
account, a debit card account, free-standing bank account or other suitable account. 

20 It is important that the bank authenticates the user during this process to prevent 
people assuming the identity of others in order to receive funds fraudulently. 

The request for a PPN can be received by the bank as an in-branch request, 
phone request, mail-in request, fax request or via an electronic network such as the 
Internet or digital TV. All these request avenues should feed into a single logging 

25 system to allow these requests to be processed appropriately. 

An applicant can request a PPN account from a financial institution either in 
association with an existing credit/debit card/bank account, or as a standalone 
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payment instrument (i.e. where the user's credit cards and bank accounts are held 
with another financial institution). In the former case the financial institution 
already has account information available as to where to forward the monies 
received, the user need only specify which account he/she wishes to use. In the case 
5 of a stand alone account the user must provide details of where the funds are to be 
transferred. The request can be handled by any normal route (in bank branch, by 
post, fax phone or by electronic network such as the Internet). 

PPN Allocation System (Step 302) 

The PPN allocation system handles requests for a PPN. During this 

10 allocation the system provides a valid PPN account number. 

The allocation system ensures that there is no reversible numerical 
relationship between the PPN and an associated credit/debit card in order to ensure 
that the real credit/debit card number cannot be derived from the PPN. In addition 
the allocation system must check the availability of a PPN before issue to ensure that 

15 each issued PPN is unique. The leading digits of the PPN must be defined in order 
to route the PPN to the processing center appropriate for each issuing bank, in the 
existing credit card systems this is achieved with the use of BIN number (usually the 
leading 6 digits). 



PPN/Primary Account Database Storage (Step 303) 

20 Following the registration and allocation process, details of the allocated 

PPN and associated credit/debit card or other account details need to be logged in 
a database (122 and 124, Fig. 1) in order to support a variety of the other systems 
listed below such as the processing system, the PPN query system and customer 
service. The name of the account holder and other personal details may be held 

25 according to the policy of the PPN issuing bank. This system is secured from 
unauthorized external access since it contains sensitive financial services 
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information. For maximum data integrity a single database could service all these 
different functions. Alternatively a number of interlinked databases could be used 
if the registration allocation system were geographically remote from the 
processing system or these functions were handled by different organizations. In 
the case of multiple databases additional controls would be used to reconcile 
information held across all the relevant databases. 

Secure PPN Database Interface (Step 304) 

An interface allows database queries, for example to request a PPN for a 
specific individual or to verify that a PPN belongs to a specific person. This 
function allows for the payer to ensure that the PPN belongs to the intended 
recipient and the number has not been altered or wrongly recorded at any point. 
The system could be used as a trusted source of PPN numbers as a form of PPN 
escrow. Alternatively for increased privacy a user could be required to enter the 
PPN and a name and be informed only if the match is correct or incorrect. A 
PPN holder may request for this service to be disabled if they wish for complete 
anonymity. This latter option will be provided only at the discretion of the issuing 
bank. 

It is important to prevent unauthorized access to or alteration of 
credit/debit card or other personal details information of PPN holders held in the 
database. Therefore this database access system is highly secure and only allow 
specific types of requests by application of appropriate industry standard security 
and "firewall" technology. The database must however allow the bank and or the 
PPN holder (with appropriate authentication) to update information in the database 
if the PPN holder wishes to alter the status and stored attributes of the PPN 
account. 

This database should also provide means for review of both PPN holders 
and the issuing bank of all transactions details. Access to this function can be via 
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the customer service system or by the provision of a direct software connection to 
the database for example using software that the PPN holder obtains from his bank 
or using a standard browser interface. 

PPN User Storage and Access Device(s) and System(s) (Step 305) 

5 A range of PPN user storage and access devices can be used and the choice 

of the most appropriate format will depend on how the user intends to use the 
system. The user could simply be notified of the PPN number by letter or by the 
issuing a paper certificate, as explained above (136, Fig. 1). The PPN can be 
issued on its own physical plastic (or other suitable material) card (132, Fig. 1) 

10 that is marked so as to ensure that it cannot be mistakenly used for purchases. 

Such a card could carry a magnetic stripe containing the appropriate information 
to allow for payments to be made on a standard terminal. The PPN could be 
issued on a smart card carrying a chip containing the appropriate 
information/certificates to allow for payments to be made on a smart card enabled 

15 terminal. Alternatively it could be printed on the reverse of an existing card (134, 
Fig. 1). In this way a bank could issue a PPN to all its existing customers in a 
simple and cost effective way during card renewals. 

The PPN can also be provided encoded in a software package that can be 
accessed by the user as required. The PPN could also be stored remotely by the 

20 issuing bank with the user accessing the number as required while connected to an 
electronic network (Internet, digital TV etc) using a browser or software designed 
for this express purpose (142, Fig. 1). Such access could use the above database 
access system. These systems could also provide for the automatic transfer of the 
PPN to a website or other recipient via email, or ATM or wireless set (108, 140, 

25 Fig. 1) as explained above. 
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PPN Transaction Initiation Device(s) and System(s) (Step 306) 
Mechanisms are also required to initiate payments via a PPN. The account 
holder could register the PPN within a third party system electronic payment 
system such as PayPal, etc. and the system could then operate normally while 

5 providing extra security because the third party system electronic payment system 
does not hold actual bank or credit card details. In this scenario, payment would 
be made by whatever mechanism the system supports. Money would be 
transferred to the PPN as credit card refund. Such a refund could be handled by 
existing credit card terminals or transaction processing software if the PPN 

10 conformed to the standard credit card number format. When this transaction 
reaches the issuing bank it is remapped to transfer the funds either to the users 
own credit card account or directly to a bank account. 

In addition banks could implement their own specific systems and devices 
for handling PPN payments. Such systems could add additional features such as 

15 PPN recipient verification, extraction of appropriate fees at source, allowing PPN 
holders and payers to check/review prior payments/receipts and provision of a 
digital receipt for the payer/recipient in the case of later disputes. 

In the case of a PPN system using its own numerical format that deviated 
in some respects from standard credit formats, specifically modified transaction 

20 devices/software may be required to recognise and validate the PPN format before 
initiating the transaction. 

PPN Transaction Routing Network (Step 307) 

A PPN transaction once initiated would be transferred through the credit 
card networks typically involving transmission to a merchant acquiring bank and 
25 then onto the issuing bank either directly or via the existing card associations 

(e.g.,. VISA, Mastercard or Europay etc.) networks, collectively referred to and 
the central processing station 102 in Fig. 1. Inclusion of appropriate leading 
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digits in the PPN will ensure that the existing global credit cards systems will 
automatically route the PPN transaction to the appropriate processing center as is 
the case with conventional refund transactions. 

In the case of a PPN system using its own numerical format that deviated 
5 in some respects from standard credit formats, modifications to the existing 

systems may be required. Ideally from a commercial stand-point the PPN format 
should be capable of routing through the existing credit card networks even if it 
deviates from the standard format. Therefore in determining the appropriate 
number format for the PPN, the ability of the existing systems to transparently 
10 handle such a format is of key importance. 



PPN Processing System (Step 308) 

On receipt of a PPN transaction the processing system completes some or 
all of the following processes: 

Validate that the received PPN is a valid and issued number, 
15 Identify the appropriate associated customer account details, 

Determine how funds are due to be forwarded for this customer and 
obtain required account numbers (e.g. credit/debit or bank account details), 

Make appropriate deductions in the case where the bank is charging 
a commission or other service fee to customers for this service. 
20 Create appropriate transaction messages incorporating the 

forwarding account details and the adjusted amount for the fund transfer to be 
completed by existing bank systems. Log transaction details in a database for 
auditing and customer service purposes, etc. 

Forward the new or modified transaction messages onto the 
25 appropriate systems for completion. These systems may be the existing 

credit/debit card processing systems or direct electronic fund transfer systems. 
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In specific circumstances the processing system may be configured 
to hold/defer payments for a specific period or until additional confirmation is 
received that the transaction can proceed. This option may arise in the case of 
suspicious transactions, as a method for the bank to fund the system by gaining 
5 interest on the held funds or when payment is made contingent upon the delivery 
of specific goods and services. 

When required the processing system should be able to initiate a 
reversal of a payment in order to correct for inaccurate or inappropriate payments. 

Customer Service System (Step 309) 

10 The customer service system provides the bank with a means to monitor 

activity and transactions with the PPN processing system. This will include 
assessing the state of the PPN processing system and initiating database queries 
for completed transactions. The need for this service arises from the need for 
monitoring by the bank and to handle customer queries regarding specific PPN 

15 transactions. 

Integration with existing payment services 

For PPN systems using existing credit card formats, the system will be 
compatible with any system that currently provides for payment onto a credit/debit 
card. 

20 Banks that issue PPN accounts could provide a specific payment 

portal/ website that would operate for their own or any other banks PPN. This has 
the benefit that the payer can choose a site that he trusts on the basis of a well 
known name or potentially his/her own bank even if he/she does not have a PPN 
account. The recipient therefore does not have to dictate to the payer that the 

25 payment is made on a specific site (one that the payer may not previously have 
known). Such a site can provide enhanced PPN services. These services could 
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include providing verification that a specific PPN was associated with the intended 
payee, email notification by the PPN holder of a payment and provision of a 
digital receipt signed by a certificate authority for use in case of a dispute. 
Payment from the payer can be initiated as a bank transfer or credit card payment 

5 or other suitable remote payment mechanism. The funds could then be transferred 
to the PPN by initiating a credit card refund transaction using the PPN and 
existing credit transaction handling hardware or software. This site can, under 
terms agreed with both parties, extract commission for the transaction from either 
the vendor or the purchaser. This would most commonly happen in association 

10 with online auction sites. To extract commission from the purchaser, the 

transaction website adds a specified amount or percentage to the transaction. To 
extract commission from the vendor a specific amount is deducted from the 
transaction prior to completing the transfer of funds to the payment number's 
account. 



15 Transaction Cycle 

Once the payment site receives the PPN, a standard type credit card refund 
transaction message is created, typically for refunds within a settlement message 
file, containing the PPN, transaction amount and other required information. The 
credit card networks will route the information contained within the transaction 

20 messages according to the leading digits of the payment number in the same 

manner as an existing credit card transaction. This will be routed on the basis of a 
specific BIN (i.e. Bank Identification Number such as the first six digits in a VISA 
format number) to a dedicated processing server which will verify the validity of 
the payment number and use a database to identify the appropriate receiving 

25 account. 

With a credit card format compatible PPN, funds transfer will be handled 
by the existing settlement systems with funds being transferred to the PPN issuing 
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bank from the card scheme and recovered by the scheme from the merchant 
acquirer bank and from there from the originating payment site which acts as a 
credit card merchant. In the case that the acquiring bank and issuing bank are the 
same institution or have a bilateral agreement then the funds transfer may be made 
5 without reference to the card scheme networks. 

Im plementation of Location of System Components 

In terms of location of the system, it could be implemented within a bank's 
internal credit card processing system. If a dedicated BIN (i.e. 6 digit header in 
VISA and Mastercard systems) is used then the credit card networks will direct all 

10 transactions to the required processing site. The software receiving the transaction 
information would validate the PPN number, determine the matching account 
details and then use standard existing networks to effect the payment. 

The service could also be offered on a bureau basis whereby the PPN 
transactions of wide range of banks would be directed to a single site operated on 

15 behalf of all the banks. Provided this site had access to the account details of each 
PPN holder and access to the banking/credit card payment systems, such a single 
site could operate such a service for many banks. This service could allow banks 
to handle their own PPN allocation and then inform the central service of the 
number. Alternatively the entire process could be centralized with the bureau 

20 service hosting the allocation system. In this option, banks would when handling a 
request for a PPN request a PPN from the central system and provide the other 
required account details at the same time. 

Such a bureau solution could be operated by the card scheme themselves 
providing a global service from a single site. In this situation the central site could 

25 provide for remapping the received PPN to the matching credit/debit card and 
forward the transaction/settlement messages onto the appropriate institutions for 
completion of the transaction. The interchange fees contained within the 
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settlement messages would inherited from the original message to maintain the 
PPN specific interchange fees rather than the interchange associated with the 
receiving account. In this scenario the banks would receive standard refund 
transactions on a credit/debit card number and can process these entirely as 
5 normal without the financial costs associated with reverse interchange. 

Alternatively the central system could also provide for direct transfer of funds to a 
users bank account without the need for further use of the credit card systems, 
instead linking directly into the electronic funds transfer systems. 

Alternative Implementation 

10 In the above description the transaction website (effectively a web 

merchant) initiates the purchasing transaction on behalf of the payer and transmits 
the required information for the payment transaction for processing by the 
payment card processing software center. In this scenario the payment from the 
payer and the payment to the recipient are separate transactions. 

15 An alternative is for both the PPN and the purchasing credit card number 

to be transmitted within appropriate fields within the financial message that is 
transmitted back for processing, with the PPN being used as the primary account 
number to ensure appropriate routing of the transaction message. In this scenario 
the payment and receipt of funds are linked and conducted by a party within the 

20 banking/credit card system rather than at the merchant level. This has the 

advantage that the payers details can be logged along with the PPN transaction to 
allow for easier transaction audit. Under these circumstances the required 
processing for both making and receiving the payment could be initiated at several 
levels, either at the level of a credit card merchant acquirer bank, within the card 

25 scheme systems or following routing from a merchant acquirer to a card 

processing system. Within these systems the purchasing and payment transaction 
can then be executed either within the same system (i.e., merchant acquirer or by 
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processing system) or be divided between the two systems., Completion of the 
transaction will require one of these two systems to initiate a standard credit 
transaction effectively acting as a merchant and receive payment on behalf of the 
purchaser or to receive funds from the payer using an alternative payment system. 
5 An appropriate fund transfer (or credit to a credit card account) is then made to 
the payee. Pre-agreed commissions can be added to the purchase amount or 
deducted from payment amount in the course of the transaction. A negotiated 
commission can be paid to the website/merchant that initiated the transaction and 
transmitted the information into the credit card networks. This can be done in an 
10 independent settlement process or by direct bank transfer since the merchant is 
identified within the financial message format as described above. 
The PPN has a number of highly positive features such as: 
(1) PPN can be used in situations where revealing a credit card number 
would be considered potentially risky. 
15 (2) The interchange fees associated with normal transactions can be 

modified to be appropriate for receiving payment rather than making payment. 
This allows for person to person payments without impacting on the processing of 
true refunds. 

(3) The existing global credit card networks can be used to handle the 
20 payment providing a trusted established system. 

(4) Currency exchange is handled automatically by the card networks. 

(5) In order to receive payment, the PPN holder does not need to 
reveal bank account or credit/debit card details to anyone other than his own bank 
or credit card company. 

25 It will be appreciated that the present invention is not limited to the 

foregoing exemplary embodiments. Variations and modifications will occur to 
those skilled in the art without departing from the scope of the present invention as 
described in the claims appended hereto. 
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Claims 




A personal payment number format comprising: 



t/ routing information to direct financial transaction information to a 
particular institution among a plurality of institutions using a computer network; 



a unique identification of a user associated with said particular institution, 
wherein said personal payment number identifying an account into which funds 
can be transferred but from which funds cannot be transferred. 

2. The personal payment number format according to claim 1, further 
10 comprising an identifier identifying said personal payment number as an account 

into which funds can be transferred but not from which funds can be received. 

3. The personal payment number format according to claim 1, wherein 
said routing information identifies an address associated with accounts limited to 
receiving funds and not capable of transferring out funds. 

15 4. The personal payment number format according to claim 1 , wherein 

said routing information includes a bank identification number (BIN). 

5. The personal payment number format according to claim 1, wherein 
said personal payment number is formatted in accordance with standard 
credit/debit card formats. 



5 



and 



20 



6. The personal payment number format according to claim 1, wherein 
said personal payment number is formatted to be distinct from standard 
credit/debit card formats. 
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7. The personal payment number format according to claim 1, wherein 
said personal payment number is formatted to be unique among standard 
credit/debit card formats. 

8. The personal payment number format according to claim 1, farther 
comprising a verification code. 

9. The personal payment number format according to claim 1, wherein 
said verification code is selected from a group consisting of a checksum number 
and a cvv2. 

v6. A personal payment number processing system comprising: 
/ means for allocating personal payment numbers which identify an account 
into which funds can be transferred but from which funds cannot be transferred; 
means for initiating a personal payment number transaction; 
means for routing a personal payment transaction; and 
means for processing said personal payment number transaction. 

11. The personal payment number processing system according to claim 
10, further comprising 

means for handling request for a personal payment number; and 
means for distributing personal payment numbers. 

12. The personal payment number processing system according to claim 
10, further comprising interfacing with a secure personal payment number 
database to allow queries about transactions. 
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13. The personal payment number processing system according to claim 
10, further comprising means for storing personal payment numbers and 
associated credit/debit accounts as linked accounts. 

14. The personal payment number processing system according to claim 
10, wherein said allocation means includes means for ensuring that there is no 
reversible numerical relationship between the personal payment number and an 
associated credit/debit account. 

15. The personal payment number processing system according to claim 
10, wherein said means for processing said personal payment number transaction 
further includes: 

means for validating that a received personal payment number is a valid 
and issued number, and 

means for identifying the appropriate associated customer account details. 

16. The personal payment number processing system according to claim 
10, wherein said means for processing said personal payment number transaction 
further includes: 

means for determine how funds are due to be forwarded for this customer 
and obtain required account numbers, 

means for creating appropriate transaction messages incorporating the 
forwarding account details and the adjusted amount for the fund transfer to be 
completed by existing bank systems, and 

means for forwarding the transaction messages onto the by existing bank 
systems for completion. 
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/ 

JO. A personal payment number processing method comprising: 
^allocating personal payment numbers which identify an account into which 
funds can be transferred but from which funds cannot be transferred; 
initiating a personal payment number transaction; 
routing a personal payment transaction; and 
processing said personal payment number transaction. 

18. The personal payment number processing method according to 
claim 17, further comprising 

handling request for a personal payment number; and 
distributing personal payment numbers. 

19. The personal payment number processing system according to claim 
17, further comprising storing personal payment numbers and associated 
credit/debit accounts as linked accounts. 

20. The personal payment number processing system according to claim 
17, wherein said step of processing said personal payment number transaction 
further includes: 

validating that a received personal payment number is a valid and issued 
number, and 

identifying the appropriate associated customer account details. 
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ARSTRACT OF THE DISCLOSURE 
The delivery of a secure method and system of generating person to person, 
business to business, business to person and person to business transactions 
involving transfer of funds from one party (the purchaser) to a second party (the 
vendor). This invention extends the functionality of existing credit/debit cards and 
the associated infrastructure to provide a secure global mechanism for 
individuals/businesses to receive funds without revealing confidential information or 
having to become credit/debit accepting merchants. 
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